Skip to content

Integrity measurement architecture (IMA)

Supported 2,085 threads 4,929 messages Latest

About Lists, Files, Maintainers, Reviewers
Lists
linux-integrity
Files
Documentation/security/IMA-export-delete.rst, Documentation/security/IMA-templates.rst, include/linux/secure_boot.h, security/integrity/, security/integrity/ima/
Maintainers
Dmitry Kasatkin, Roberto Sassu, Mimi Zohar
Reviewers
Eric Snowberg
Show bot threadsBotsLatest activityActivityNewest threadsNewMost repliesRepliesMost participantsPeople
  1. ima: fix kexec measurement buffer overflow after failed loads PATCH 1 patch Jérémy Jean kexec linux-integrity linux-security-module +2 kernel/, security/integrity/ima/ In review 1 reply
  2. landlock: Add READ_METADATA and WRITE_METADATA access rights PATCH -next v3 18 patches Cai Xinchen bpf driver-core ecryptfs +19 fs/ (33), security/ (13), tools/ (13), include/ (8), +5 In review 3 replies
  3. initramfs: add support for xattrs in the initial ram disk PATCH v6 4 patches Danny Hu initramfs linux-api linux-fsdevel +4 usr/ (4), include/linux/, init/, security/integrity/ima/ In review 1 reply
  4. evm: fix TOCTOU heap OOB in protected xattr reads PATCH v2 1 patch Jérémy Jean linux-integrity linux-security-module lkml +1 security/integrity/evm/evm_main.c In review 3 replies
  5. ima: fix races when deleting measurement list entries PATCH v3 1 patch Weibin Liu linux-integrity linux-security-module lkml +1 security/integrity/ima/ (2) New 0 replies
  6. mm: continue vma_flags_t conversion PATCH 13 patches Lorenzo Stoakes (ARM) damon kvm linux-fsdevel +9 mm/ (19), security/ (4), include/ (3), fs/ (2), +3 Applied 50 replies
  7. ima: fix races when deleting measurement list entries PATCH v2 1 patch Weibin Liu linux-integrity linux-security-module lkml +1 security/integrity/ima/ (2) Superseded 3 replies
  8. Add macsmc support for Intel Macs, replacing applesmc RFC PATCH 14 patches Atharva Tiwari asahi keyrings linux-acpi +16 drivers/ (34), include/ (2), security/ (2), MAINTAINERS, +1 In review 12 replies
  9. evm: fix TOCTOU heap OOB in protected xattr reads PATCH 1 patch Jérémy Jean linux-integrity linux-security-module lkml +1 security/integrity/evm/evm_main.c Superseded 0 replies
  10. ima: use the system blacklist in lieu of the IMA blacklist keyring PATCH 3 patches Mimi Zohar keyrings linux-integrity lkml security/integrity/ima/ (3), certs/, include/keys/, security/integrity/ New 0 replies
  11. ima: hold ima_extend_list_mutex while locating the trim position PATCH 1 patch Weibin Liu linux-integrity linux-security-module lkml +1 security/integrity/ima/ima_queue.c In review 2 replies
  12. ima: use the system blacklist in lieu of the IMA blacklist keyring RFC PATCH 3 patches Mimi Zohar keyrings linux-integrity lkml security/integrity/ima/ (3), certs/ (2), include/keys/, security/integrity/ New 0 replies
  13. ima: initialize the real inode attributes of the iint cache PATCH v2 1 patch Cai Xinchen linux-integrity linux-security-module lkml +1 security/integrity/ima/ima_iint.c New 0 replies
  14. ima: initialize the real inode attributes of the iint cache PATCH 1 patch Cai Xinchen linux-integrity linux-security-module lkml +1 security/integrity/ima/ima_iint.c Superseded 3 replies
  15. sched: Add support for long task name PATCH v8 6 patches André Almeida linux-api linux-mm linux-trace-kernel +2 drivers/ (17), include/ (12), security/ (6), kernel/ (5), +4 In review 2 replies
  16. initramfs: add support for xattrs in the initial ram disk PATCH v5 4 patches Danny Hu initramfs linux-api linux-fsdevel +4 usr/ (4), include/linux/, init/, security/integrity/ima/ Superseded 0 replies
  17. [email protected], [email protected] PATCH 1 patch Fabrice Derepas linux-integrity linux-security-module lkml security/integrity/evm/evm_main.c In review 2 replies
  18. ima: reject modsig when detached data cannot be supplied PATCH v4 2 patches Jérémy Jean linux-integrity linux-security-module lkml +1 security/integrity/ima/ (5), Documentation/security/ In review 1 reply
  19. ima: reject modsig when detached data cannot be supplied PATCH v3 2 patches Jérémy Jean linux-integrity linux-security-module lkml +1 security/integrity/ima/ (5), Documentation/security/ Superseded 3 replies
  20. landlock: Add READ_METADATA and WRITE_METADATA access rights PATCH -next v2 18 patches Cai Xinchen bpf driver-core ecryptfs +15 fs/ (33), tools/ (13), security/ (12), include/ (8), +4 Superseded 7 replies
  21. UUID and GUID user and group ids (*_r system calls) RFC PATCH v2 41 patches Jan Koester audit keyrings linux-api +8 fs/ (36), include/ (30), arch/ (20), kernel/ (14), +10 NAK 6 replies
  22. ima: discard modsig on detached-data binding failure PATCH v2 1 patch Jérémy Jean linux-integrity linux-security-module lkml security/integrity/ima/ (5), Documentation/security/ In review 1 reply
  23. UUID and GUID user and group ids (*_r system calls) RFC PATCH 11 of 41 patches Jan Koester audit keyrings linux-api +8 include/ (10), kernel/ (6), net/ (6), fs/ (4), +3 In review 3 replies
  24. ima: reject modsig if detached data cannot be supplied PATCH 1 patch Jérémy Jean linux-integrity linux-security-module lkml security/integrity/ima/ (3) Superseded 2 replies
  25. ima: recover number of violations after kexec PATCH v3 1 patch Enrico Bravi linux-integrity security/integrity/ima/ima_template.c In review 1 reply
  26. security: ima: support TSM measurement registers RFC PATCH 3 patches Yeoreum Yun linux-arm-kernel linux-coco linux-integrity +2 security/integrity/ima/ (13), drivers/virt/coco/guest/, include/linux/ In review 9 replies
  27. ima: correctly recover number of violations after kexec PATCH v2 1 patch Enrico Bravi linux-integrity security/integrity/ima/ima_template.c Superseded 2 replies
  28. sched: Add support for long task name PATCH v7 6 patches André Almeida linux-api linux-mm linux-trace-kernel +1 drivers/ (17), include/ (12), security/ (6), kernel/ (5), +4 Superseded 1 reply
  29. ima: bound line scan in ima_read_policy() to fix OOB read PATCH 1 patch Fabrice Derepas linux-integrity linux-security-module lkml security/integrity/ima/ima_fs.c In review 2 replies
  30. evm: check return values of crypto_shash functions PATCH 1 patch Roberto Sassu linux-integrity linux-security-module lkml security/integrity/evm/evm_crypto.c New 0 replies
  31. ima: bind cached appraisal results to policy identity PATCH 1 patch Sung Byeongchan linux-integrity security/integrity/ima/ (5) In review 1 reply
  32. landlock: Add READ_METADATA and WRITE_METADATA access rights RFC PATCH -next 12 patches Cai Xinchen bpf driver-core ecryptfs +13 fs/ (30), security/ (10), include/ (7), drivers/ (2), +3 Superseded 20 replies
  33. integrity: Return error codes in audit messages PATCH v4 2 patches Frederick Lawler linux-integrity linux-security-module lkml security/integrity/ima/ (9), security/integrity/ (2), security/integrity/evm/ In review 1 reply
  34. integrity: Return error codes in audit messages PATCH v3 2 patches Frederick Lawler linux-integrity linux-security-module lkml security/integrity/ima/ (9), security/integrity/ (2), security/integrity/evm/ Superseded 4 replies
  35. integrity: Return error codes in audit messages PATCH v2 3 patches Frederick Lawler linux-integrity linux-security-module lkml security/integrity/ima/ (8), security/integrity/ (2), security/integrity/evm/ Superseded 5 replies
  36. sched: Add support for long task name PATCH v6 6 patches André Almeida linux-api linux-mm linux-trace-kernel +1 drivers/ (17), include/ (12), security/ (6), kernel/ (5), +4 Superseded 0 replies
  37. hazptr: handle NULL address in hazptr_detach PATCH 1 patch Mathieu Desnoyers lkml lkmm rcu include/linux/hazptr.h In review 8 replies
  38. fs: port to const struct mnt_idmap PATCH 27 patches Christian Brauner ceph-devel linux-cifs linux-fsdevel +5 fs/ (255), include/ (13), security/ (13), Documentation/ (3), +7 In review 35 replies
  39. ima: allow users to specify the pcr index with IMA_MEASURE_PCR_IDX PATCH v2 1 patch Julian Braha linux-integrity linux-security-module lkml security/integrity/ima/Kconfig In review 1 reply
  40. ima: Check for ERR_PTR from dentry_path() in validate_hash_algo() PATCH 1 patch Bradley Morgan linux-integrity linux-security-module lkml +1 security/integrity/ima/ima_appraise.c In review 2 replies
  41. ima: allow users to specify the pcr index with IMA_MEASURE_PCR_IDX PATCH 1 patch Julian Braha linux-integrity linux-security-module lkml security/integrity/ima/Kconfig Superseded 2 replies
  42. sched: Add support for long task name PATCH v5 6 patches André Almeida linux-api linux-mm linux-trace-kernel +2 drivers/ (15), include/ (12), kernel/ (4), security/ (4), +4 Superseded 0 replies
  43. ima: select the SHA384 PCR bank for the boot aggregate PATCH 1 patch Singh, Jashandeep linux-integrity linux-security-module lkml security/integrity/ima/ima_crypto.c In review 7 replies
  44. ima: don't measure/appraise files on configfs PATCH v2 2 patches Frederick Lawler linux-integrity linux-security-module lkml Documentation/ABI/testing/, fs/configfs/, include/uapi/linux/, security/integrity/ima/ In review 4 replies
  45. ima: clean up IMA_MEASURE_PCR_IDX in Kconfig PATCH 1 patch Julian Braha linux-integrity linux-security-module lkml security/integrity/ima/Kconfig In review 2 replies
  46. ima: don't measure/appraise files on configfs PATCH 2 patches Frederick Lawler linux-integrity linux-security-module lkml fs/configfs/, include/uapi/linux/, security/integrity/ima/ Superseded 3 replies
  47. FAILED: patch "[PATCH] ima: fix out-of-bounds read in xattr_verify()" failed to apply to 5.10-stable tree PATCH 5.10.y 1 patch [email protected] stable security/integrity/ima/ima_appraise.c Applied 1 reply
  48. evm: check return values of crypto_shash functions PATCH 1 patch Mimi Zohar linux-integrity security/integrity/evm/evm_crypto.c In review 3 replies
  49. ima: reject a kexec buffer whose declared size exceeds the buffer PATCH 1 patch Fabrice Derepas linux-integrity linux-security-module lkml security/integrity/ima/ima_template.c New 0 replies
  50. Add Apple T2 NHI device links PATCH v5 2 patches Atharva Tiwari keyrings linux-integrity linux-pci +4 security/integrity/platform_certs/ (2), arch/x86/kernel/, drivers/thunderbolt/, include/linux/platform_data/x86/ Superseded 6 replies
Page 1 of 42 –